This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft File: Sd2PGmKl1_gCEt4PPv51svozj_4.mft (raw, json) Hash identifier: bSmAUbCYBoPFHOOHHmVpqpTXvX3b0YzEA6kLlkLs/uQ= Subject key identifier: 26:95:B3:0C:3A:12:62:A4:48:DB:9B:F6:AB:47:7C:74:F8:7A:8A:53 Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe Certificate serial: 019B37FC2D0DA8A26CF368836450BC8E7140 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft Manifest number: 0E40 Signing time: Fri 19 Dec 2025 19:00:31 +0000 Manifest this update: Fri 19 Dec 2025 19:00:31 +0000 Manifest next update: Sat 20 Dec 2025 19:00:31 +0000 Files and hashes: 1: 1-ghy1_BSABsGI7akBKLZbOuS5vM.roa (hash: 5f9usyUF6Ob7YmYVFXsGfm7dIcSCmT5Qe4VX7r7TJaU=) 2: Ik19RRjyfHjJ96aag1tg9GHfyYs.roa (hash: OMp+kmye4OfcUJMJC7fA4xejXa2bwcRzzIV7LNwQJIA=) 3: Sd2PGmKl1_gCEt4PPv51svozj_4.crl (hash: Fc8PL3lsH2ewSCpdk5gUnKhDRwh80cXWp+0U8w4syZw=) 4: ewyBIvuudgP0tUenVwQ9pf-UuFw.roa (hash: rOH4lK3Tu41q/aakYU3ilg+rGKNxkPxnYW0KziN38LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:2d:0d:a8:a2:6c:f3:68:83:64:50:bc:8e:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe Validity Not Before: Dec 19 19:00:31 2025 GMT Not After : Dec 20 19:00:31 2025 GMT Subject: CN=2695b30c3a1262a448db9bf6ab477c74f87a8a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ef:71:07:ba:cb:cb:d9:72:d4:87:df:fd:27: 0a:ac:d3:5e:dd:bd:32:9f:bb:a0:1b:40:a0:62:02: 2f:a1:a6:e5:03:37:83:d3:63:d8:82:f9:28:43:f2: a0:6e:fa:59:4b:cb:64:ac:00:3a:9a:1b:0f:c0:c4: ca:47:06:7d:6c:3f:8f:ed:ed:7e:e2:70:e4:9f:1e: 0f:ec:4c:c1:91:68:ee:23:41:8c:6c:35:69:f7:d3: 80:6d:da:80:b7:15:fa:08:73:43:00:e8:1c:99:d4: c7:8c:ff:2b:e8:50:e7:c1:98:4b:57:b1:96:ae:0c: 8d:d1:c7:91:df:82:33:39:12:10:32:50:b9:3e:20: b5:1f:1f:d5:e9:8e:d5:60:45:c9:74:51:ec:df:2e: ab:f3:09:14:80:a6:fc:24:65:6a:94:d6:8c:dd:fc: b6:3c:59:6f:0b:87:91:ce:d3:6c:00:e0:4b:5b:8c: fb:a7:7f:2e:61:88:c1:65:e8:23:f8:1f:91:47:90: e7:15:24:60:88:d6:9a:d5:e2:54:46:ef:6e:08:0f: 67:71:8d:9e:60:7f:a9:88:ec:ff:3e:33:ce:b3:6f: 9c:6e:1f:0f:6e:44:91:8d:0f:b8:01:1e:c6:51:5c: 44:c1:f1:eb:c3:37:5f:e5:90:dc:35:45:c0:8b:98: cf:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:95:B3:0C:3A:12:62:A4:48:DB:9B:F6:AB:47:7C:74:F8:7A:8A:53 X509v3 Authority Key Identifier: keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:41:0f:f7:11:3f:c5:3c:12:95:c7:2d:f1:22:38:14:36:1f: 13:ba:70:84:15:af:fd:b9:5c:c6:d1:29:95:17:67:c6:03:1c: 5e:64:2f:63:3b:94:2c:8a:9d:f3:f2:4d:36:89:af:ab:1b:d5: da:8a:b6:e6:d1:e6:80:ac:2d:57:ed:33:74:f6:20:6f:bb:16: b0:0e:80:5a:08:6f:81:d2:5d:74:55:5e:de:9e:c0:d9:56:87: ac:8d:17:e3:f3:0b:ce:ea:33:22:38:39:5f:47:c2:54:d6:e4: c8:9f:b6:14:4a:13:b1:4d:d8:85:80:b2:30:61:b4:67:1f:3d: 74:73:7e:43:3f:fc:70:d2:76:3a:17:ed:d3:c5:0c:7a:0f:92: 79:12:6f:99:86:0e:6d:fd:e1:bb:80:2c:1e:dc:3d:d8:ee:da: c3:3a:e4:6d:a1:28:34:47:a6:e5:4e:32:71:60:ef:b5:74:ab: fe:2a:3d:0f:7f:e9:50:da:43:cf:2a:3c:7c:18:5a:2d:46:c7: 41:70:d0:e8:83:13:e8:f0:46:26:80:70:35:a0:80:a4:2d:87: 6a:eb:45:57:ed:f1:8d:f1:13:18:cb:f5:76:1c:14:96:c2:18: ad:52:16:29:56:22:f2:4f:49:64:02:98:4e:52:4a:db:a0:67: 71:23:a9:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/C0NqKJs82iDZFC8jnFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZGQ4ZjFhNjJhNWQ3ZjgwMjEyZGUwZjNlZmU3NWIyZmEz MzhmZmUwHhcNMjUxMjE5MTkwMDMxWhcNMjUxMjIwMTkwMDMxWjAzMTEwLwYDVQQD EygyNjk1YjMwYzNhMTI2MmE0NDhkYjliZjZhYjQ3N2M3NGY4N2E4YTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0u9xB7rLy9ly1Iff/ScKrNNe3b0y n7ugG0CgYgIvoablAzeD02PYgvkoQ/KgbvpZS8tkrAA6mhsPwMTKRwZ9bD+P7e1+ 4nDknx4P7EzBkWjuI0GMbDVp99OAbdqAtxX6CHNDAOgcmdTHjP8r6FDnwZhLV7GW rgyN0ceR34IzORIQMlC5PiC1Hx/V6Y7VYEXJdFHs3y6r8wkUgKb8JGVqlNaM3fy2 PFlvC4eRztNsAOBLW4z7p38uYYjBZegj+B+RR5DnFSRgiNaa1eJURu9uCA9ncY2e YH+piOz/PjPOs2+cbh8PbkSRjQ+4AR7GUVxEwfHrwzdf5ZDcNUXAi5jPEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCaVsww6EmKkSNub9qtHfHT4eopTMB8GA1UdIwQY MBaAFEndjxpipdf4AhLeDz7+dbL6M4/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2Yt Y2VlYzQ5MTI0YzBmLzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2YtY2VlYzQ5MTI0YzBm LzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUEP9xE/ xTwSlcct8SI4FDYfE7pwhBWv/blcxtEplRdnxgMcXmQvYzuULIqd8/JNNomvqxvV 2oq25tHmgKwtV+0zdPYgb7sWsA6AWghvgdJddFVe3p7A2VaHrI0X4/MLzuozIjg5 X0fCVNbkyJ+2FEoTsU3YhYCyMGG0Zx89dHN+Qz/8cNJ2Ohft08UMeg+SeRJvmYYO bf3hu4AsHtw92O7awzrkbaEoNEem5U4ycWDvtXSr/io9D3/pUNpDzyo8fBhaLUbH QXDQ6IMT6PBGJoBwNaCApC2HautFV+3xjfETGMv1dhwUlsIYrVIWKVYi8k9JZAKY TlJK26BncSOpzg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:24:55 2025 by rpki-client